DDoS

22.2 Tbps — the largest DDoS attack in history

Cloudflare mitigated a 22.2 Tbps DDoS attack in 40 seconds. Record broken three times.

September 28, 2025 3 min read

On 23 September, Cloudflare mitigated a DDoS attack peaking at 22.2 Tbps and 10.6 billion packets per second. It lasted 40 seconds. The previous record — 7.3 Tbps — was set three months earlier. Record broken three times in one year.

The arms race

Q2 2025: 7.3 Tbps. September: 22.2 Tbps. Q4: 31.4 Tbps. Overall DDoS attacks grew 70% larger in 2025 vs 2024.

What to do

  1. You can't mitigate 22 Tbps alone. Use a DDoS protection provider.
  2. Autonomous response is mandatory. 40-second attacks make human response irrelevant.
  3. Test protection quarterly.
  4. Layer defences. DNS + application + geographic filtering.